INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Navigate360's Tipline Exposed as Malicious

| 2026-10-27 20:36 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
On October 27, 2026, multiple Ontario Crime Stoppers organizations suspended use of Navigate360's tip-reporting program due to the company's data breach and unacceptable incident response. The breach, which occurred in March 2026, exposed over 1.5 million Canadian Crime Stoppers tips, including those submitted by school students, teachers, community members, and U.S. armed forces personnel. Despite being aware of the hacktivist acquisition of 8.3 million tips for 7 months, Navigate360 has not provided detailed information to its clients or notified them about the incident, leaving tipsters at risk. The company's lack of transparency is catching up with it as more organizations advise people not to use their tiplines, and U.S. state education departments are collaborating to seek answers from Navigate360.
Technical Mitigations AI-generated
• Block or hunt for IP addresses that were tracked by P3 upon request. • Use a version of Navigate360 prior to the March 2026 breach (specifically, before the hacktivist acquired 8.3 million tips). • Monitor for suspicious activity related to the compromised data set and report any potential security incidents to authorities or incident response teams.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA educationeducation
Incident Timeline
‎November 21, 2025
More organizations in the education sector are advising users not to utilize Navigate360's tip lines due to concerns over lack of transparency.
industry Education
General Document Context
‎November 2025
Threat actors initiated a multistate cybersecurity incident between November 2025 and March 2026, which may have affected SafeVoice.
‎March 5, 2026
The Federal Trade Commission is urged to investigate Navigate360 for violating the FTC Act and ensure compliance with basic security expectations following a breach that may have exposed Social Security numbers and driver's license information.
industry Education
General Document Context
organisation SSN
Those affected may need to call the contact phone number if they have not received the credit monitoring offer but their SSN or DL was affected.
organisation Social Security
It states that names and Social Security numbers and/or driver’s license numbers may be involved.
organisation the Navigate360 Breach
Previous Reporting on the Navigate360 Breach (aka “BlueLeaks 2.0”) on DataBreaches.net: Previous Data Analyses of the Leak by DataBreaches.net: Table 1: Types of Offenses (. pdf )
organisation Previous Data Analyses of the Leak
Previous Reporting on the Navigate360 Breach (aka “BlueLeaks 2.0”) on DataBreaches.net: Previous Data Analyses of the Leak by DataBreaches.net: Table 1: Types of Offenses (. pdf )
organisation Crime-Related Referrers
Table 5: Frequency of Sex Offenses Related to Schools ( .pdf ) Table 6: Crime Stoppers or Crime-Related Referrers ( .
organisation the Federal Trade Commission Do Anything
pdf ) Will the Federal Trade Commission Do Anything?
organisation FTC
We believe Navigate360 violated Section 5 of the FTC Act , and the FTC should investigate this breach and Navigate360’s incident response, and take firm action to ensure Navigate360 complies with basic security expectations appropriate to the sensitivity of the information it stores and the assurances it made to tipsters.
financial 1754 letter
If you have any questions or concerns not addressed in this letter, please call 833-966-1754 (toll free) Monday through Friday, during the hours of 9:00 a.m. and 9:00 p.m. Eastern Standard Time (excluding U.S. national holidays).
Contacts 833-966-1754 Note from DataBreaches.net: There is no “following page” after the notice above on BusinessWire, but the recommendations page is on Navigate360’s website notice .
‎March 18, 2026
More organizations in the education sector are advising users not to utilize Navigate360's tip lines due to concerns over lack of transparency.
industry Education
General Document Context
‎about March 18, 2026
Navigate360 became aware of suspicious activity on one of its systems.
‎March 2026
Navigate360's lack of transparency regarding a 7-month-old hacktivist breach of its SafeVoice system, where approximately 10% of tips with personally identifiable information were compromised, has led more organizations to advise people not to use their tip lines.
target_region Canada
The protective response from local Canadian Crime Stoppers organizations may make readers wonder why U.S. local Crime Stoppers organizations did not also suspend use of the program after they learned of the March 2026 breach months ago.
organisation DataBreaches
You can read the full email exchange between DataBreaches and U.S. Crime Stoppers’ legal counsel in a previous post .
organisation Signal
Email: info@databreaches[.]net   or contact me on Signal: Dissent.73.] Brief Background Navigate 360 has been aware for 7 months that a hacktivist acquired 8.3 million tips from its system.
infrastructure 8.3 tips
Email: info@databreaches[.]net   or contact me on Signal: Dissent.73.] Brief Background Navigate 360 has been aware for 7 months that a hacktivist acquired 8.3 million tips from its system.
organisation Tipsters
Tipsters were assured their tips could remain anonymous and that they could not be tracked.
organisation IP
In fact, as DataBreaches previously published, although tipsters were told they would not and could not be tracked, Navigate360’s subsidiary P3 assured its clients that it could and would track IP addresses upon request.
organisation Navigate360 months ago
And while two U.S. Senators sent inquiries to Navigate360 months ago, they have not made the firm’s responses public.
organisation SafeVoice
Some snippets from their statement: In response to the incident, NDE and DPS are taking action to protect SafeVoice and coordinating with state education leaders across the country to demand accountability and transparency from Navigate360.
organisation U.S. Department of Justice
Although the incident drew Congressional inquiries, national media coverage, and a U.S. Department of Justice criminal investigation, Nevada-specific information remained limited.
organisation The U.S. Department of Justice
[Note from DataBreaches.net: The U.S. Department of Justice has not made any public statement about any criminal investigation.
organisation SafeVoice Nevada
This month, Navigate360 notified NDE and DPS that the forensic investigation concluded that approximately 10 percent of SafeVoice Nevada tips with personally identifiable information (PII) was compromised.
organisation PII
This month, Navigate360 notified NDE and DPS that the forensic investigation concluded that approximately 10 percent of SafeVoice Nevada tips with personally identifiable information (PII) was compromised.
organisation NRS 388.1454–388.1458
Nevada law (NRS 388.1454–388.1458) establishes strong protections for the anonymity of SafeVoice tips and the confidentiality of information submitted through the system.
organisation NRS 603A.220
As a result, NDE is providing public notice in accordance with NRS 603A.220 through this release and the SafeVoice website.
‎July 19
DataBreaches submitted a watchdog complaint about Navigate360's inadequate security and deceptive advertising on July 19.
‎October 22
The Nevada Department of Education and the Nevada Department of Public Safety issued a statement on October 22 about the Navigate360 breach affecting SafeVoice Nevada.
organisation The Nevada Department of Education Shines
The Nevada Department of Education Shines a Little Light On October 22, the Nevada Department of Education (NDE) and the Nevada Department of Public Safety (DPS) issued a statement about the Navigate360 breach that affected SafeVoice Nevada .
organisation the Nevada Department of Education
The Nevada Department of Education Shines a Little Light On October 22, the Nevada Department of Education (NDE) and the Nevada Department of Public Safety (DPS) issued a statement about the Navigate360 breach that affected SafeVoice Nevada .
organisation NDE
The Nevada Department of Education Shines a Little Light On October 22, the Nevada Department of Education (NDE) and the Nevada Department of Public Safety (DPS) issued a statement about the Navigate360 breach that affected SafeVoice Nevada .
organisation the Nevada Department of Public Safety
The Nevada Department of Education Shines a Little Light On October 22, the Nevada Department of Education (NDE) and the Nevada Department of Public Safety (DPS) issued a statement about the Navigate360 breach that affected SafeVoice Nevada .
‎October 23
Navigate360 issued a public notice on October 23.
organisation Navigate360’s Public Notice
Navigate360’s Public Notice On October 23, Navigate360 issued a public notice .
‎2026/10/27
Navigate360's lack of transparency regarding their data handling practices led to a public warning from the Rhode Island Attorney General, advising users not to use their tipping lines.
organisation Navigate360 Tries
Even Now, Navigate360 Tries to Hide from Disclosure Seen on the Rhode Island Attorney General’s site today :  Navigate360’s notification to Rhode Island, submitted by its external counsel at Jones Day.
‎November 21, 2025 to March 5, 2026
An unauthorized third party accessed one of Navigate360's systems and obtained copies of some data between November 21, 2025 to March 5, 2026.
‎2026/10/27
Toronto Crime Stoppers reported that more than 1.5 million Canadian Crime Stoppers tips leaked following Navigate360's data breach.
organisation Navigate360
Navigate360’s lack of transparency is catching up with them; More organizations tell people NOT to use their tiplines.. Multiple Ontario Crime Stoppers organizations have suspended use due to Navigate360’s data breach and unacceptable incident response; U.S. state education departments are collaborating to seek more answers from Navigate360; an update from DataBreaches.net.
organisation Toronto Crime
Toronto Crime Stoppers didn’t take long to respond after Valérie Ouellet and Michelle Allan dove into the Crime Stoppers data in the Navigate360 breach and reported that more than 1.5 million Canadian Crime Stoppers tips leaked .
infrastructure 1.5 Stoppers tips
Toronto Crime Stoppers didn’t take long to respond after Valérie Ouellet and Michelle Allan dove into the Crime Stoppers data in the Navigate360 breach and reported that more than 1.5 million Canadian Crime Stoppers tips leaked .
organisation Company
…the next-to-last paragraph of the notification letter, which it appears to be something Jones Day is likely including in all of Navigate360’s notifications to state attorneys general: This letter and its contents are confidential, contain sensitive security and commercial information of the Company, and are provided solely for the purpose of complying with applicable notification requirements.
‎spring 2026
Navigate360 provided initial notification to NDE and DPS in spring 2026 that SafeVoice may have been affected by a criminal multistate cybersecurity incident occurring between November 2025 and March 2026.
Tactical Metrics
Metrics
infrastructure
1,500,000
Stoppers Tips
Toronto Crime Stoppers didn’t take long to respond after Valérie Ouellet and Michelle Allan dove into the Crime Stoppers data in the Navigate360 breach and reported that more than 1.5 million Canadian Crime Stoppers tips leaked .
Metrics
infrastructure
8,300,000
Tips
Email: info@databreaches[.]net   or contact me on Signal: Dissent.73.] Brief Background Navigate 360 has been aware for 7 months that a hacktivist acquired 8.3 million tips from its system.
Metrics
financial
1,754
Financial Impact / Stolen Funds
If you have any questions or concerns not addressed in this letter, please call 833-966-1754 (toll free) Monday through Friday, during the hours of 9:00 a.m. and 9:00 p.m. Eastern Standard Time (excluding U.S. national holidays).
Contacts 833-966-1754 Note from DataBreaches.net: There is no “following page” after the notice above on BusinessWire, but the recommendations page is on Navigate360’s website notice .
Intelligence Sources
Data Breaches 2026-10-27